use serde::{Serialize, Deserialize};

/**
 * Yara扫描结果
 */
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct YaraResult {
	pub matches: bool,
    pub timestamp: i64,
	pub mal_obj_type: String, 
	pub mal_obj_key: String,
	pub rule_id: Vec<String>,
	pub task_total: i64,
	pub task_finish: i64,
	pub task_match: i64,
}